Known vulnerabilities in npm-git-publish

Vendor: theoy
Software: npm-git-publish
Software CPE: cpe:2.3:a:theoy:npm-git-publish:*:*:*:*:*:npm:*:*
Website: https://www.npmjs.com/~theoy
Total vulnerabilities: 1
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting npm-git-publish npm-git-publish is affected by 1 known vulnerabilities: 1 high Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU24789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
 CWE-78 High
No
No
 - 31.01.2020 SB2020013105